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AMENDMENTS TO THE CLAIMS 

This listing of claims replaces all prior versions and listings of claims in the application: 

LISTING OF CLAIMS ; 

1-6. (Cancelled) 

7. (Currently Amended) In a computer system including a host computer and a storage 
system which has a first volume for storing data from the host computer and a second 
volume, and a storage control unit for controlling data transf e r replication from the first 
volume to the -a said second volume that is the pair of said first volume, a data protection 
apparatus coupled to the host computer and the storage system, comprising: 
an event detection unit for detecting an event occurrence; and 

a replication stopping unit for instructing said storage control unit to stop data transfer 
replication from said first volume to said second volume that is the pair of said first volume , 
when said event detection unit detects an event; 

an illegal intrusion detection unit for detecting an illegal intrusion into said host 
computer; 

wherein said event detection unit receives a detection of the illegal intrusion from said 
illegal intrusion detection unit; and 
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when said event detection unit receives the detection of the illegal intrusion, said 
replication stopping unit instructs said storage control unit to stop data transf e r replication 
from said first volume to said second volume that is the pair of said first volume . 

8. (Cancelled) 

9. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 7, wherein: 

said computer system further includes a computer virus detection unit for detecting a 
computer virus in said storage system; 

said event detection unit receives the detection of the computer virus from said 
computer virus detection unit; and 

when said event detection unit receives the detection of the computer virus, said 
replication stopping unit instructs said storage control unit to stop data replication transfer 
from said first volume to said second volume that is the pair of said first volume . 

10. (Currently Amended) A data protection method for protecting data in a computer 
system including a host computer and a storage system which has a first volume for storing 
data from the host computer and a second volume, and a storage control unit for controlling 
data replication tran s f e r from said first volume to a_said second volume that is a pair of said 
first volume , wherein said data protection method comprises steps of: 



3 



Appl. No. 10/803,945 

Amendment dated December 14, 2006 

Response to Office Action mailed August 14, 2006 



Docket No. TSM-37 



detecting an intrusion into said host computer; and 

instructing said storage control unit to stop data replication t ransf e r fi-om said first 
volume to said second volume that is the pair of said first volume , when said intrusion is 
detected. 

11. (Currently Amended) A program embodied on a storage medium that can be read by 
an information processing apparatus for making the information processing apparatus 
perform data protection in a computer system including a host computer and a storage system 
which has a first volume for storing data from the host computer and a second volume, and a 
storage control unit for controlling data replication t ransf e r from said first volume to_a said 
second volume that is a pair of said first volume , wherein said program makes said 
information processing apparatus perform processes of: 

detecting that an intrusion into the host computer has occurred; and 
instructing said storage control unit to stop data replicatio nt ransfer from said first 
volume to said second volume that is the pair of said first volume , when said intrusion is 
detected. 

12-13. (Cancelled) 

14. (Currently Amended) In a computer system including a host computer and a storage 
system which has a first volume for storing data from the host computer and a second 
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volume, and a storage control unit for controlling data replication transfcr from the first 

volume to the -a said second volume that is a pair of said first volume, a data protection 

apparatus coupled to the host computer and the storage apparatus comprising: 
an event detection unit for detecting an event occurrence; and 
a replication stopping unit for instructing said storage control unit to stop data 

replication transfcr from said first volume to said second volume that is the pair of said first 

volume, when said event detection unit detects an event; 

wherein said computer system further comprises an alteration detection unit that reads 

given data in said plurality of replicated volumes to detect respective differences between the 

given data; and 

the event detected by said event detection unit is a detection result of the differences 
between the given data, with said detection result being received from said alteration 
detection unit. 

15. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 

write data to said first volume is transferr e d replicated by said storage control unit to 
said second volume with a delay of a given time. 

16. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 14, wherein: 
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as said second volume, a plurality of second volumes are provided; and 
said storage control unit switches a replication transfer destination of write data of 
said first volume, at given time intervals among said plurality of second volumes. 

17. (Currently Amended) A data protection apparatus in a computer system according to 
Claim 16, wherein: 

data transferr e d re plicated to said plurality of second volumes is fiirther transf e rr e d 
replicated to another plurality of second volumes. 

18. (Cancelled) 

19. (Previously Presented) A data protection apparatus in a computer system 
according to Claim 14, wherein: 

said storage control unit further controls communication between said host computer 
and said first volume; and 

said data protection apparatus instructs said storage controller to stop communication 
between said host computer and said first storage when said event detection unit detects said 
event. 

20. (Cancelled) 
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21 . (New) A data protection apparatus in a computer system according to Claim 7, 
wherein said replication stopping unit further instructs said storage control unit to cancel data 
replication from said first volume to said second volume. 

22. (New) A data protection apparatus in a computer system according to Claim 7, 
further including a path disconnection unit for instructing said storage control unit to stop 
communication between said host computer and said storage system, when said event 
detection unit detects an event. 

23. (New) A data protection method according to Claim 10, further including the step of 
instructing said storage control unit to cancel data replication from said first volume to said 
second volume that is the pair of said first volume, when said intrusion is detected 

24. (New) A data protection method according to Claim 10, further including the step of 
instructing said storage control unit to stop communication between said host computer and 
said storage system, when said when said intrusion is detected. 

25. (New) A program embodied on a storage medium according to Claim 1 1, further 
including said program making said information processing apparatus perform the process of 
instructing said storage control unit to cancel data replication from said first volume to said 
second volume that is the pair of said first volume, when said intrusion is detected 
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26. (New) A program embodied on a storage medium according to Claim 1 1 , further 
including said program making said information processing apparatus perform the process of 
instructing said storage control unit to stop communication between said host computer and 
said storage system, when said when said intrusion is detected. 

27. (New) A data protection apparatus in a computer system according to Claim 14, 
wherein said replication stopping unit further instructs said storage control unit to cancel data 
replication from said first volume to said second volume. 

28. (New) A data protection apparatus in a computer system according to Claim 7, 
further including a path disconnection unit for instructing said storage control unit to stop 
communication between said host computer and said storage system, when said event 
detection unit detects an event. 
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